Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c9d5620-aeb3-442d-ac52-b345961602c4.roa
File:                     1c9d5620-aeb3-442d-ac52-b345961602c4.roa (raw, json)
Hash identifier:          Isebw+WLVhMcrpQT9xXfkW7wX4PZOmaEwqZgDQNuqrQ=
Subject key identifier:   3F:42:69:13:73:9C:A2:ED:11:1A:84:3E:20:F6:64:5C:30:0C:21:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       308F36DE37DD3CE2B759AF4DBC7B981348151BC4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c9d5620-aeb3-442d-ac52-b345961602c4.roa
Signing time:             Wed 10 Apr 2024 00:00:00 +0000
ROA not before:           Wed 10 Apr 2024 00:00:00 +0000
ROA not after:            Wed 15 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.56.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8f:36:de:37:dd:3c:e2:b7:59:af:4d:bc:7b:98:13:48:15:1b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 10 00:00:00 2024 GMT
            Not After : May 15 23:59:59 2024 GMT
        Subject: serialNumber=d77d2df1f3e9b7e8d8d74c7c534cfe0d5b48cef37f47d5a4cfb98fc61c0b5e94, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:8a:4c:4f:c0:a4:3b:cb:c4:4b:1b:e9:74:
                    24:45:92:e4:1b:10:1c:3d:85:17:4b:c7:76:eb:b6:
                    29:4a:90:4b:8e:91:0a:c9:58:52:83:d8:c4:fe:35:
                    3c:42:e4:54:68:43:b4:66:16:83:e2:ce:fa:c3:be:
                    00:80:7e:51:7c:cf:45:78:9f:75:7c:a0:f8:2e:11:
                    f6:47:6c:06:df:9f:63:a4:a9:b7:70:20:57:a8:f6:
                    35:83:ed:49:de:03:54:e2:29:47:c7:23:45:e2:27:
                    05:68:23:fc:3a:38:5c:88:09:96:bf:fe:57:d9:24:
                    55:1d:d3:78:88:8e:73:50:0f:1d:54:db:0f:e7:fc:
                    79:22:e5:4e:b1:7f:32:e3:1c:89:d9:37:75:bb:82:
                    79:72:40:fd:f5:7c:cf:55:99:44:da:af:d2:71:76:
                    5f:4b:a7:b3:0d:7f:ff:36:fe:6d:bf:61:af:17:ee:
                    26:02:90:7e:71:78:bc:2a:f9:c1:bd:72:34:7d:81:
                    20:20:3c:4a:b3:2c:a0:bf:19:8e:32:ee:73:c1:1b:
                    18:44:c9:25:23:b4:9f:d6:2e:1a:2d:70:d5:80:a3:
                    f2:ca:63:e6:ed:38:c4:ed:ce:99:0c:25:b4:ca:6b:
                    57:8a:cc:0d:23:e5:f6:b8:0c:2b:b2:f4:90:03:07:
                    84:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:42:69:13:73:9C:A2:ED:11:1A:84:3E:20:F6:64:5C:30:0C:21:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c9d5620-aeb3-442d-ac52-b345961602c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.56.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1a:fe:52:55:d6:1b:f3:71:e2:7b:00:bd:a8:ba:0a:51:96:b8:
         03:8f:d6:95:a0:40:5b:15:4d:46:e2:24:53:89:2b:fd:f0:a6:
         3e:d3:b4:53:4a:3e:0e:6a:9a:76:53:aa:80:da:0b:5c:37:54:
         ba:b0:55:22:4e:c1:44:ca:d6:de:7b:d6:08:cb:a6:3f:f7:88:
         21:1c:ed:6a:13:83:14:56:f7:39:2c:b3:45:96:3d:46:5a:79:
         f2:7b:25:e4:89:7c:7c:d5:5e:b2:82:36:ff:30:a3:66:c4:fb:
         8f:34:98:81:4a:10:e1:ae:2e:ba:6f:06:26:e7:a1:76:41:98:
         bd:df:8a:69:36:b3:f8:0f:8f:3a:44:2a:1c:06:69:01:8c:86:
         69:51:1e:af:c8:f0:1e:e1:2f:18:d9:83:0d:cc:59:2f:ce:1c:
         f2:fd:92:6b:ab:d2:b0:c8:21:90:01:ac:81:85:0a:11:44:e2:
         d5:1d:b8:69:4a:53:9b:53:4d:91:56:77:64:1e:ce:aa:d6:70:
         a8:3f:2c:79:87:29:f5:7f:ad:74:6b:ac:e8:a6:ea:01:56:f3:
         12:cf:ea:ed:9e:59:4a:5a:57:ed:ad:72:6a:a6:32:a4:28:67:
         28:5c:c7:33:eb:9e:92:a3:ac:16:fb:ca:aa:45:65:07:d5:c1:
         40:90:01:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:14 2024 by rpki-client on console-fra.rpki-client.org